CVE-2025-43300

CRITICALCISA KEV

10.0

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

CVE Details

CVSS v3.1 Score10.0

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/21/2025

Last Modified11/26/2025

Sourcekev

Honeypot Sightings0

CISA KEV

VendorApple

ProductiOS, iPadOS, and macOS

Vulnerability NameApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

KEV Date Added2025-08-21

Remediation Due Date2025-09-11

Ransomware UseUnknown

Affected Products

apple:ipadosapple:iphone_osapple:macos

Weaknesses (CWE)

CWE-787

References

https://support.apple.com/en-us/125141(product-security@apple.com)

https://support.apple.com/en-us/125142(product-security@apple.com)

http://seclists.org/fulldisclosure/2025/Sep/10(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2025/Sep/14(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2025/Sep/52(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/cisagov/vulnrichment/issues/201(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.